General

  • Target

    DosExec.exe

  • Size

    300KB

  • MD5

    78abcdd79bd62f35b974a9ad3e92c56b

  • SHA1

    c852f7f3af82c1582bb05eb0178394b1f61a67cc

  • SHA256

    a76c6b9cbb52e71a2ec52032783a8953222dd65a3dedeeb75dc0278e1ccacef9

  • SHA512

    b0fa9873b19890bff66859ecc8892b869a80200e96f1abdbc69d1fc6a4d4afdff1db9542c1bee774d0d7f1cb6ffdc8774676e74685a287263351f6a68a433eea

  • SSDEEP

    6144:CuIlWqB+ihabs7Ch9KwyF5LeLodp2D1Mmakda0qLlNpw:p6Wq4aaE6KwyF5L0Y2D1PqLy

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • DosExec.exe
    .exe windows:5 windows x86 arch:x86

    Password: dfir


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections